SA-08(28) Acceptable Security
All changes in this version
Title
Acceptable Security
Control
Implement the security design principle of acceptable security in [Assignment: systems or system components].
Discussion
The principle of acceptable security requires that the level of privacy and performance that the system provides is consistent with the users’ expectations. The perception of personal privacy may affect user behavior, morale, and effectiveness. Based on the organizational privacy policy and the system design, users should be able to restrict their actions to protect their privacy. When systems fail to provide intuitive interfaces or meet privacy and performance expectations, users may either choose to completely avoid the system or use it in ways that may be inefficient or even insecure.
Parameters
sa-08.28_odp: systems or system components
Assessment objective
SA-08(28) [Assignment: systems or system components] implement the security design principle of acceptable security.
STIG rules that implement this control 0
No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).